topic #10. but legislation ONLY Flashcards
list 4 relevant examples of legislation
-computer misuse act (CMA) 1990
-The freedom of information Act 2000
-the regulation of investigatory Powers act (RIPA) 2000
-the general data protection regulation (GDPR) 2018
what is the computer misuse act 1990
what are the 3 things that are an offense to do, due to the misuse act?
-put in place in 1990 to help combat issues arising from misuse of computers
- access data without permission, e.g.. looking at someone else’s files.
- access computer systems without permission, e.g. hacking
- alter data stored on a computer system without permission, e.g. writing a virus that deliberately deletes data.
what is the freedom of information Act
what are two ways in which the act provides public access to information held by authorities?
-so people have a right to know about the activities of public authorities
1.public authorities are obliged to publish certain information about their activities
2.members of the public are entitled to request information from public authorities.
What year was the computer misuse act (CMA) put in place?
1990
what year was the freedom of information act put in place?
2000
what year was the regulation of investigatory powers act (RIPA) put in place?
2000
what year was the general data protection regulation (GDPR) put in place?
2018
what is the regulation of investigatory powers act (RIPA) 2000
what is the 4 aims of the act
-act that regulates the powers of public bodies to carry out surveillance and investigation. also regulates the interception of communications.
- prevent or detect crime
- prevent public disorder from occuring
- ensure national security and the safety of the general public
- investigate or detect any abnormal illegal use of telecommunication systems.
what are the concerns of privacy around the regulation of investigatory powers act (RIPA) 2000
that thousands of organisations now have the right to intercept and monitor electronic communications, so it is regarded now as a threat to our privacy and many speculate that the RIPA is being misused and not being used for its original purpose
What is the general data protection regulation (GDPR) 2018
-in 2018, the data protection act 1998 was replaced with the GDPR 2018, which sets out data protection principles and the main responsibilities of organisations who store data. Applies to all personal data
what are the six principles that the GDPR 2018 requires personal data to be?
- processed lawfully, fairly and in a transparent manner in relation to individuals
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes
- adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
- accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that inaccurate personal data, with regard to the purposes for which it is processed, is erased or rectified without delay.
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data was processed.
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
what 8 rights does the GDPR provide to the following rights for individuals
- right to be informed
2.right of access - right to correction
- right to erasure
5.right to processing
6.right to data portability - right to object
8.right in relation to automated decision making and profiling
what 3 exemptions that can apply to the GDPR 2018-
-national security
-public security
-defence
what are two exemptions to the freedom of information act 2000
-information held for criminal investigations
-information relating to correspondence with the royal family
